OpenAI details Linux kernel bug hunt: 948 local privilege-escalation flaws confirmed, patches generated

A thousand fewer paths to root

OpenAI built a pipeline that finds, exploits and patches vulnerabilities on its own. In Linux kernel research it confirmed 948 unique local privilege-escalation bugs and produced candidate patches, dynamically reproducing 1,724 vulnerabilities at a total API cost of $1,213,430, or $1,279 per local privilege-escalation exploit on average. The pipeline uses a cybersecurity model OpenAI has not yet released; results went to maintainers after human review, and hundreds of severe bug reports and patches have been sent out.

Why it matters: After an agent succeeds at privilege escalation, OpenAI adds a separate check to confirm which bug was actually exploited, extending validation to the attack path and cutting misattribution.